5

CVE-2012-5643

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

Data is provided by the National Vulnerability Database (NVD)
Squid-cacheSquid Version2.0
Squid-cacheSquid Version2.1
Squid-cacheSquid Version2.2
Squid-cacheSquid Version2.3
Squid-cacheSquid Version2.4
Squid-cacheSquid Version2.5
Squid-cacheSquid Version2.6
Squid-cacheSquid Version2.7
Squid-cacheSquid Version2.7 Updatestable3
Squid-cacheSquid Version2.7 Updatestable4
Squid-cacheSquid Version3.0
Squid-cacheSquid Version3.0 Update- Editionpre1
Squid-cacheSquid Version3.0 Update- Editionpre2
Squid-cacheSquid Version3.0 Update- Editionpre3
Squid-cacheSquid Version3.0 Update- Editionpre4
Squid-cacheSquid Version3.0 Update- Editionpre5
Squid-cacheSquid Version3.0 Update- Editionpre6
Squid-cacheSquid Version3.0 Update- Editionpre7
Squid-cacheSquid Version3.0 Updaterc4
Squid-cacheSquid Version3.0.stable1
Squid-cacheSquid Version3.0.stable2
Squid-cacheSquid Version3.0.stable3
Squid-cacheSquid Version3.0.stable4
Squid-cacheSquid Version3.0.stable5
Squid-cacheSquid Version3.0.stable6
Squid-cacheSquid Version3.0.stable7
Squid-cacheSquid Version3.0.stable8
Squid-cacheSquid Version3.0.stable9
Squid-cacheSquid Version3.0.stable10
Squid-cacheSquid Version3.0.stable11
Squid-cacheSquid Version3.0.stable11 Updaterc1
Squid-cacheSquid Version3.0.stable12
Squid-cacheSquid Version3.0.stable13
Squid-cacheSquid Version3.0.stable14
Squid-cacheSquid Version3.0.stable15
Squid-cacheSquid Version3.0.stable16
Squid-cacheSquid Version3.0.stable16 Updaterc1
Squid-cacheSquid Version3.0.stable17
Squid-cacheSquid Version3.0.stable18
Squid-cacheSquid Version3.0.stable19
Squid-cacheSquid Version3.0.stable20
Squid-cacheSquid Version3.0.stable21
Squid-cacheSquid Version3.0.stable22
Squid-cacheSquid Version3.0.stable23
Squid-cacheSquid Version3.0.stable24
Squid-cacheSquid Version3.0.stable25
Squid-cacheSquid Version3.1
Squid-cacheSquid Version3.1.0.1
Squid-cacheSquid Version3.1.0.2
Squid-cacheSquid Version3.1.0.3
Squid-cacheSquid Version3.1.0.4
Squid-cacheSquid Version3.1.0.5
Squid-cacheSquid Version3.1.0.6
Squid-cacheSquid Version3.1.0.7
Squid-cacheSquid Version3.1.0.8
Squid-cacheSquid Version3.1.0.9
Squid-cacheSquid Version3.1.0.10
Squid-cacheSquid Version3.1.0.11
Squid-cacheSquid Version3.1.0.12
Squid-cacheSquid Version3.1.0.13
Squid-cacheSquid Version3.1.0.14
Squid-cacheSquid Version3.1.0.15
Squid-cacheSquid Version3.1.0.16
Squid-cacheSquid Version3.1.0.17
Squid-cacheSquid Version3.1.0.18
Squid-cacheSquid Version3.1.1
Squid-cacheSquid Version3.1.2
Squid-cacheSquid Version3.1.10
Squid-cacheSquid Version3.1.11
Squid-cacheSquid Version3.1.12
Squid-cacheSquid Version3.1.13
Squid-cacheSquid Version3.1.14
Squid-cacheSquid Version3.1.15
Squid-cacheSquid Version3.1.16
Squid-cacheSquid Version3.1.17
Squid-cacheSquid Version3.1.18
Squid-cacheSquid Version3.1.19
Squid-cacheSquid Version3.1.20
Squid-cacheSquid Version3.1.21
Squid-cacheSquid Version3.2.0.1
Squid-cacheSquid Version3.2.0.2
Squid-cacheSquid Version3.2.0.3
Squid-cacheSquid Version3.2.0.4
Squid-cacheSquid Version3.2.0.5
Squid-cacheSquid Version3.2.0.6
Squid-cacheSquid Version3.2.0.7
Squid-cacheSquid Version3.2.0.8
Squid-cacheSquid Version3.2.0.9
Squid-cacheSquid Version3.2.0.10
Squid-cacheSquid Version3.2.0.11
Squid-cacheSquid Version3.2.0.12
Squid-cacheSquid Version3.2.0.13
Squid-cacheSquid Version3.2.0.14
Squid-cacheSquid Version3.2.0.15
Squid-cacheSquid Version3.2.0.16
Squid-cacheSquid Version3.2.0.17
Squid-cacheSquid Version3.2.0.18
Squid-cacheSquid Version3.2.0.19
Squid-cacheSquid Version3.2.1
Squid-cacheSquid Version3.2.2
Squid-cacheSquid Version3.2.3
Squid-cacheSquid Version3.3.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 35.41% 0.969
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.